From f1863d6769d08096b26e433ac0ef04e3b602ab99 Mon Sep 17 00:00:00 2001
From: Greg Hellings <greg.hellings@gmail.com>
Date: Tue, 11 Aug 2026 08:23:50 -0500
Subject: [PATCH] chore: add default Claude settings

---
 home/baseline/claude_code.nix | 77 +++++++++++++++++++++++++++++++++++
 home/baseline/default.nix     |  1 +
 2 files changed, 78 insertions(+)
 create mode 100644 home/baseline/claude_code.nix

diff --git a/home/baseline/claude_code.nix b/home/baseline/claude_code.nix
new file mode 100644
index 0000000..fc4b288
--- /dev/null
+++ b/home/baseline/claude_code.nix
@@ -0,0 +1,77 @@
+{ ... }:
+{
+  home.file.".claude/settings.json".text = builtins.toJSON {
+    permissions = {
+      additionalDirectories = [
+        "~/src"
+      ];
+      allow = [
+        "Agent(Plan)"
+        "Bash(cargo build *)"
+        "Bash(cargo run *)"
+        "Bash(cargo test *)"
+        "Bash(docker --version)"
+        "Bash(docker build *)"
+        "Bash(docker pull *)"
+        "Bash(env)"
+        "Bash(find *)"
+        "Bash(git diff *)"
+        "Bash(git log *)"
+        "Bash(git ls-files *)"
+        "Bash(git status)"
+        "Bash(grep:*)"
+        "Bash(ls *)"
+        "Bash(md5 *)"
+        "Bash(podman --version)"
+        "Bash(podman build *)"
+        "Bash(podman pull *)"
+        "Bash(pre-commit *)"
+        "Bash(tox *)"
+        "Bash(tr *)"
+        "Bash(uv add *)"
+        "Bash(uv run tox *)"
+        "Bash(uv sync *)"
+        "Bash(uv tool *)"
+        "Bash(xargs ls -la)"
+        "Edit(~/src/**)"
+        "Read(~/.claude/**)"
+        "Read(~/src/**)"
+        "Read(//tmp/**)"
+        "WebFetch(*)"
+
+        "mcp__plugin_atlassian_atlassian__getAccessibleAtlassianResources"
+        "mcp__plugin_atlassian_atlassian__getConfluencePage"
+        "mcp__plugin_atlassian_atlassian__getIssueLinkTypes"
+        "mcp__plugin_atlassian_atlassian__getJiraIssue"
+        "mcp__plugin_atlassian_atlassian__getJiraIssueTypeMetaWithFields"
+        "mcp__plugin_atlassian_atlassian__searchJiraIssuesUsingJql"
+
+        "mcp__claude_ai_Atlassian__addCommentToJiraIssue"
+        "mcp__claude_ai_Atlassian__getAccessibleAtlassianResources"
+        "mcp__claude_ai_Atlassian__getConfluencePage"
+        "mcp__claude_ai_Atlassian__getJiraIssue"
+        "mcp__claude_ai_Atlassian__getJiraIssueTypeMetaWithFields"
+        "mcp__claude_ai_Atlassian__getIssueLinkTypes"
+        "mcp__claude_ai_Atlassian__getTransitionsForJiraIssue"
+      ];
+      ask = [
+        "mcp__plugin_atlassian_atlassian__addCommentToJiraIssue"
+        "mcp__plugin_atlassian_atlassian__createIssueLink"
+        "mcp__plugin_atlassian_atlassian__editJiraIssue"
+
+        "mcp__claude_ai_Atlassian__editJiraIssue"
+        "mcp__claude_ai_Atlassian__createIssueLink"
+        "mcp__claude_ai_Atlassian__transitionJiraIssue"
+        "mcp__claude_ai_Atlassian__updateConfluencePage"
+      ];
+      defaultMode = "plan";
+      deny = [
+        "Bash(git commit *)"
+        "Bash(git push *)"
+        "Bash(rm -rf *)"
+        "Edit(~/.claude/**)"
+        "Read(~/.ssh/**)"
+      ];
+    };
+  };
+}
diff --git a/home/baseline/default.nix b/home/baseline/default.nix
index 066f45d..8133679 100644
--- a/home/baseline/default.nix
+++ b/home/baseline/default.nix
@@ -4,6 +4,7 @@
   imports = [
     ./ansible.nix
     ./bash.nix
+    ./claude_code.nix
     ./direnv.nix
     ./git.nix
     ./nushell.nix